/
(DC) Transition FAQ

(DC) Transition FAQ

Will the “no-challenge” challenge be supported in the CERTInext ACME implementation?
YES, so long as the ACME account is tied to the RSAOV type.

To what level, if not all, will account settings will be migrated from Sectigo to CERTInext - such as ACME accounts, the domains (FQDNs) assigned to them?
Certificate metadata is migrated. ACME accounts are migrated but need to be re-bound. Domains are assigned to groups and ACME accounts are assigned to groups.
Departments are now groups in CERTInext.

When will we have access to login into CERTInext Certificate Manager or utilize the ACME/REST API endpoints?
As of April 22, 2026 – We are waiting for UT Systems to sign the Agreement with InCommon and CERTInext.

  • Will any certificates be migrated from Sectigo to CERTInext?
    Certificates that have been created within in the last 398 days and are in the status of ISSUED, will be migrated to CERTInext.

  • Is there any statement or reference to documentation on exactly what "migration" means? Does it include management information like requester/approver, email reminders, and so on, that wouldn't be in the certificates directly?
    No, only the certificate “blob” will be migrated.

  • When certificates are migrated - I assume they will need to continue to use the original chain (Sectigo)?
    Yes, they continue to operate the same way. "Migrated" means metadata copied from SCM to CertiNext. Certificates aren't reissued.

Question about pragmatic limits on the number of SAN's in a single certificate issued by CertiNext. He said he found something that suggested it was InCommon that set the number.  IIRC think we have up to 100 SAN's in one of our certs, a virtual domain where we have a lot of redirects but no content. We can come up with other approaches if necessary there, but details/limits like this can undercut the promise that the new service will work exactly like the old service.

Keep in mind that more SANs means a larger transfer when setting up TLS.

Is there any ServiceNow integration?"

Yes, a very basic one. It is being enhanced.